Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/WbhRrLMhX_gBN9xkDZMjBqz2sbQ.roa
File: WbhRrLMhX_gBN9xkDZMjBqz2sbQ.roa (raw, json)
Hash identifier: 8F59KE0gIpeYjX+/NZZoTR+0as0HlZRcB0H7iXNlQGc=
Subject key identifier: 59:B8:51:AC:B3:21:5F:F8:01:37:DC:64:0D:93:23:06:AC:F6:B1:B4
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 018CC3B7059B8F42AF488A76523B59AEDBAE
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/WbhRrLMhX_gBN9xkDZMjBqz2sbQ.roa
Signing time: Mon 01 Jan 2024 06:30:00 +0000
ROA not before: Mon 01 Jan 2024 06:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47796
IP address blocks: 176.122.210.0/24 maxlen: 24
176.122.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:05:9b:8f:42:af:48:8a:76:52:3b:59:ae:db:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Jan 1 06:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59b851acb3215ff80137dc640d932306acf6b1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:93:ed:4c:a6:36:60:30:8e:d5:b4:60:97:
e6:9a:35:c6:f0:64:f8:f3:01:a5:90:75:be:46:c5:
06:95:18:cf:61:a4:44:fb:5d:21:d8:b0:33:ed:52:
52:70:bd:e6:8c:9a:2e:1e:4e:4f:5a:c2:56:d7:aa:
1b:90:9a:32:5d:94:88:4b:e0:38:02:0f:07:45:b7:
cf:65:63:a5:0c:b4:fd:84:f9:9a:b8:d6:8c:4f:24:
74:b0:0c:ab:e1:0b:47:5c:64:4b:6f:a8:de:b0:64:
f9:d8:60:52:27:e0:d8:ca:f0:70:42:69:d6:b5:ae:
8a:cf:83:84:51:fa:33:29:d4:fb:d4:3c:29:ee:86:
55:1d:03:2c:81:79:e0:85:50:7e:bb:18:b3:b0:0c:
7b:57:54:39:71:a6:84:79:53:93:40:29:ad:29:2a:
ea:31:61:d5:76:48:19:67:a7:a4:3d:6b:13:ec:0d:
9e:9f:23:af:3b:23:d0:5e:d0:50:ae:98:f3:d5:a1:
b5:91:84:84:91:47:70:ee:33:9b:13:c1:39:ec:9b:
77:f9:7b:f0:2d:6e:23:f8:00:bd:0a:e8:73:35:0c:
b7:30:54:93:39:db:42:2a:0a:38:8c:8a:da:fb:47:
94:df:9e:cc:61:02:45:60:2b:ef:07:53:f4:45:24:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B8:51:AC:B3:21:5F:F8:01:37:DC:64:0D:93:23:06:AC:F6:B1:B4
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/WbhRrLMhX_gBN9xkDZMjBqz2sbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.122.210.0/23
Signature Algorithm: sha256WithRSAEncryption
24:a4:49:14:f5:72:07:bd:3a:91:e8:fa:65:55:4d:1c:c7:7d:
91:ba:df:b6:cb:63:15:f3:9a:e4:a5:ba:59:3a:58:ec:ca:02:
e5:ee:18:e1:a9:00:a2:45:6f:a2:c5:9c:2c:60:17:9c:de:55:
94:5c:a2:f4:d1:3c:c5:f7:8c:ac:3c:c3:54:5f:88:c0:a9:ba:
0e:b4:a7:6d:c1:d5:75:82:1f:3b:64:e3:57:5d:b7:56:bc:b9:
1b:e2:3b:c2:06:f2:27:6f:db:56:a3:59:fd:02:3a:5b:cf:65:
95:1c:c4:ce:4f:07:0c:e8:e6:82:4e:a6:b4:5a:48:4d:a5:3f:
ff:f7:68:bc:2d:11:72:bd:a4:28:22:a2:44:38:bd:ee:16:5f:
f3:7f:70:7d:ee:c8:ab:c5:de:6a:e1:1a:d8:fa:f4:68:0d:9c:
20:59:e3:45:31:30:ab:f5:87:fb:48:0b:08:83:87:51:e1:5e:
c5:86:f4:9b:3a:d5:c9:9d:00:57:e8:70:a3:34:95:67:6b:8e:
c6:56:d1:98:ab:d0:d4:e9:c6:a5:0b:54:66:01:30:a0:61:f1:
b4:84:77:82:4f:45:b7:e6:35:6d:cf:5e:1c:c1:5e:a7:93:09:
9c:15:71:80:9c:45:b2:99:e1:46:00:b4:30:c2:b7:56:f4:e9:
8c:c3:f1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:23 2024 by rpki-client on console-ams.rpki-client.org